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Amendments To Claims: 

This listing of claims willreplace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1 . (Currently Amended) A system for encrypting packets on a network 
comprising: 

A. a plurality of network nodes; 

B. a communication channel between said plurality of network nodes; 

C. one or more packets sent between said plurality of network nodes over said 
communication channel; 

D. wherein said one or more packets contain an encryption key identifier and a 
payload; 

E. one or more encryption keys stored on one or more of said plurality of network 
nodes; and 

F. a system for encrypting said payload based on said encryption key identifier 
and said one or more encryption keys a 

wherein said one or more encryption keys and/or said encryption key identifier 
is based at least in part unon a portio n of said payload . 

2. (Original) A system for encrypting packets on a network as recited in 
claim 1, wherein said payload is only partially encrypted. 

3. (Original) A system for encrypting packets on a network as recited in 
claim 1, wherein said one or more packets contains a destination address. 
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4. (Original) A system for encrypting packets on a network as recited in 
claim 1 , wherein said encryption key identifier contains a value indicating n no 
encryption". 

5 . (Original) A system for encrypting packets on a network as recited in 
claim 4, wherein information external to the said payload is used to select said 
encryption key identifier. 

6. (Original) A system for encrypting packets on a network as recited in 
claim 1, wherein said payload further comprises one or more fields that are used to 
select said encryption key identifier, 

7. (Original) A system for encrypting packets on a network as recited in 
claim 6, wherein said one or more fields are selected from the group consisting of a 
socket, a protocol identifier, a node address, a network address, a sub-network 
address, a service type, and a packet identifier. 

8 . (Original) A system for encrypting packets on a network as recited in 
claim 6, wherein said one or more fields are selected from the group consisting of the 
application layer, the presentation layer, the session layer, the transport layer, the 
network layer, the data link layer, and the physical layer. 

9. (Original) A system for encrypting packets on a network as recited in 
claim 1, wherein said communication channel is a network selected from the group 
consisting of a wireless network, a light frequency network, a power line network, an 
acoustic network and a wired network. 
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10. (Currently Amended) A system for decrypting packets on a network 
comprising: 

A. a plurality of network nodes; 

B. a communication channel between said plurality of network nodes; 

C. one or more packets sent between said plurality of network nodes over said 
communication channel; 

D. wherein said one or more packets further comprises an encryption key 
identifier and a payload; 

E. one or more encryption keys stored on one or more of said plurality of network 
nodes; and 

P. a system for decrypting said payload based on said encryption key identifier 
and said one or more encryption keys a 

wherein said one or more encryption keys and/or said encryption key identifier 
is based at least in part upon a portion of said pavload , 

1 1 . (Original) A system for decrypting packets on a network as recited in 
claim 10, wherein said payload is only partially decrypted. 

12. (Original) A system for decrypting packets on a netwoik as recited in 
claim 10, wherein said one or more packets further comprises a destination address. 

13. (Original) A system for decrypting packets on anetwork as recited in 
claim 10, wherein said communication channel is a network selected from the group 
consisting of a a wireless network, a light frequency network, a power line network, an 
acoustic network and a wired network. 
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14. (Currently Amended) A system for encrypting packets on a network 
comprising; 

A. a plurality of network nodes; 

B. a communication channel between said plurality of network nodes; 

C. one or more packets forming a packet group which are sent on said 
communication channel between said plurality of network nodes; 

D. said packet group further comprising an encryption key identifier and a 
payload; 

E. one or more encryption keys for occurrences of said encryption key identifier; 
and 

F. a system for encrypting said payload based on said encryption key identifier 
and said one or more encryption keys 4 

wherein said one or more encryption keys and/or said encryption key identifier 
is based at least in part upon a portion of said pavload- 

1 5 . (Original) A system for encrypting packets on a network as recited in 
claim 14, wherein said payload is only partially encrypted. 

1 6. (Original) A system for encrypting packets on a network as recited in 
claim 14, wherein said one or more packets further comprises a destination address. 

1 7. (Original) A system for encrypting packets on a network as recited in 
claim 14, wherein said encryption key identifier further comprises a value indicating 
"no encryption". 
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1 8. (Original) A system for encrypting packets on a network as recited in 
claim 17, wherein information external to the packet payload is used to select said 
encryption key identifier 

1 9. (Original) A system for encrypting packets on a network as recited in 
claim 14, wherein said payload further comprises one or more fields that are used to 
select said encryption key identifier. 

20. (Original) A system for encrypting packets on a network as recited in 
claim 19, wherein said field is selected from the group consisting of a socket, a 
protocol identifier, a node address, a network address, a sub-network address, a 
service type, and a packet identifier. 

2 1 . (Original) A system for encrypting packets on a network as recited in 
claim 19, wherein said field is selected from the group consisting of the application 
layer, the presentation layer, the session layer, the transport layer, the network layer, 
the data link layer, and the physical layer. 

22. (Original) A system for encrypting packets on a network as recited in 
claim 14, wherein said communication channel is a network selected from the group 
consisting of, a wireless network, a light frequency network, a power line network, an 
acoustic network and a wired network. 

23. (Currently Amended) A system for decrypting packets on a network 
comprising: 

A, a plurality of network nodes; 
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B. a communication channel between said plurality of network nodes; 

C. one or more packets forming a packet group which are sent on said 
communication channel between said plurality of network nodes; 

D. said packet group further comprising an encryption key identifier and a 
payload; 

E. one or more encryption keys; and 

F. a system for decrypting said payload based on said encryption key identifier 
and said one or more encryption keys a 

wherein 9aid one or more encryption keys and/or said encry ption key identifier 
is based at least in part upon a portion of sa id pavload. 

24. (Original) A system for decrypting packets on a network as recited in 
claim 23, wherein said payload is only partially decrypted. 

25. (Original) A system for decrypting packets on a network as recited in 
claim 23, wherein said one or more packets further comprising a destination address. 

26. (Original) A system for encrypting packets on a network as recited in 
claim 23, wherein communication channel is a network selected from the group 
consisting of, a wireless network, a light frequency network, a power line network, an 
acoustic network and a wired network. 

27. (Currently Amended) A method for encrypting packets on a network 
comprising: 

A, selecting an encryption key and an associated encryption key identifier; 

B. encrypting data to form a payload using said encryption key; 
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C building a packet comprising said payload and said encryption key identifier; 
and 

D. sending said packet from a sending network node across a communication 
channel* 

wherein said selecting comprises formulating said encryption key and/or said 
associated encryption key identifier based at least in part upon a po rtion of said data. 

28. (Original) A method for encrypting packets on a network as recited in 
claim 27, wherein said packet is build with a payload that is partially encrypted. 

29. (Original) A method for encrypting packets on a network as recited in 
claim 27, wherein said packet is built further comprising a destination address. 

30. (Original) A method for encrypting packets on a network as recited in 
claim 27, wherein said packet is built with an encryption key identifier which 
indicates no encryption. 

3 1 . (Original) A method for encrypting packets on a network as recited in 
claim 30, wherein selection of said encryption key identifier is based on information 
external to said payload. 

32. (Original) A method for encrypting packets on a network as recited in 
claim 27, wherein selection of said encryption key identifier is based on information 
within said payload. 

33 . (Original) A method for encrypting packets on a network as recited in 
claim 32, wherein selection of said encryption key identifier is based on fields within 
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said payload selected from the group consisting of a socket, a protocol identifier, a 
node address, a network address, a sub-network address, a service type, and a packet 
identifier. 

34. (Original) A method for encrypting packets on a network as recited in 
claim 27, wherein selection of said encryption key identifier is based on protocol 
layers within said payload selected from the group consisting of the application layer, 
the presentation layer, the session layer, the transport layer, the network layer, the data 
link layer, and the physical layer. 

35. (Original) A method for encrypting packets on a network as recited in 
claim 27, wherein said packet is sent on communication channel selected from the 
group consisting of a wireless network, a light frequency network, a power line 
network, an acoustic network and a wired network. 

36. (Currently Amended) A method for decrypting packets on a network 
comprising: 

A. receiving a packet on a communication channel wherein said packet farther 
comprises an encryption key identifier and a payload; and 

B. decrypting said payload by using an encryption key which is indicated by said 
encryption key identifier* 

wherein said encryption key and/or said encryption key identifier is based at 
least in part upon data utilized to create said payload . 

37. (Original) A method for decrypting packets on a network as recited in 
claim 36, wherein only part of said payload is decrypted. 
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3 8 . (Original) A method for decrypting packets on a network as recited in 
claim 36, wherein said packet further comprises a destination address- 

39. (Original) A method for decrypting packets on a network as recited in 
claim 36, wherein said packet is received on a communication channel selected from 
the group consisting of a wireless network, a light frequency network, a power line 
network, an acoustic network and a wired network. 

40. (Currently Amended) A method for encrypting packets on a network 
comprising: 

A, selecting an encryption key and an associated encryption key identifier; 

B. encrypting data with said encryption key which forms one or more payloads; 

C, building one or more packets which form a packet group from said one or 
more payloads wherein a packet from said packet group further comprises an 
encryption key identifier which identifies said encryption key; and 

D. sending said packet group from a sending network node across a 
communication channel^ 

wherein said selecting comprises formulating said encryption key and/or said 
associated encryption key identifier based at least in part upon a portion of said data, 

41 . (Original) A method for encrypting packets on a network as recited in 
claim 40, wherein said one or more payloads are partially encrypted. 

42. (Original) A method for encrypting packets on a network as recited in 
claim 40, wherein said one or more packets are built with a destination address. 
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43. (Original) A method for encrypting packets on a network as recited in 
claim 40, wherein said encryption key identifier indicates no encryption. 

44. (Original) A method for encrypting packets on a network as recited in 
claim 43, wherein selection of said encryption key identifier is based on infonnation 
external to said payload. 

45. (Original) A method for encrypting packets on a network as recited in 
claim 40, wherein selection of said encryption key identifier is based on information 
within said payload. 

46. (Original) A method for encrypting packets on a network as recited in 
claim 45, wherein selection of said encryption key identifier is based on fields within 
said payload selected from the group consisting of a socket, a protocol identifier, a 
node address, a network address, a sub-network address, a service type, and a packet 
identifier. 

47. (Original) A method for encrypting packets on a network as recited in 
claim 40, wherein selection of said encryption key identifier is based on protocol 
layers within said payload selected from the group consisting of the application layer, 
the presentation layer, the session layer, the transport layer, the network layer, the data 
link layer, and the physical layer. 

48. (Original) A method for encrypting packets on a network as recited in 
claim 40. wherein said packet group is sent on a communication channel selected from 
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the group consisting of a wireless network, a light frequency network, an acoustic 
network, a power line network, and a wired network. 

49. (Currently Amended) A method for decrypting packets on a network 
comprising: 

A. receiving one or more packets which form a packet group on a communication 
channel wherein said packet group further comprises an encryption key identifier and 
one or more payloads; and 

B. decrypting said one or more payloads using an encryption key which is 
indicated by said encryption key identifier^ 

wherein said encryption key and/or said encryption key identifier is based at 
least in part upon data utilized to create said pavload . 

50. (Original) A method for decrypting packets on a network as recited in 
claim 49, wherein only part of said one or more payloads is decrypted. 

5 1 . (Original) A method for decrypting packets on a network as recited in 
claim 49, wherein said one or more packets further comprises a destination address. 

52 . (Original) A method for decrypting packets on a network as recited in 
claim 49, wherein said packet is received on communication channel selected from the 
group consisting of a wireless network, a light frequency network, a power line 
network, an acoustic network and a wired network. 
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53. (New"! A system for encrvptinp packets on a network as recited in claim U 
wherein at least two of said one or more p ackets are encrypted utilizing different ones of 
said one or more encryption keys. 
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